PT-2014-9138 · Drupal · Drupal

Published 2014-08-12 · Updated 2014-08-12

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.31

Description A denial of service issue exists due to XML entity expansion in a publicly accessible XML-RPC endpoint.

Recommendations For versions prior to 7.31, update to version 7.31 to fix this issue and other bugs.

Related Identifiers

MGASA-2014-0329

Affected Products

Drupal

References · 9

• https://osv.dev/vulnerability/MGASA-2014-0329 · Vendor Advisory
• https://debian.org/security/2014/dsa-2999 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0329.html · Security Note
• https://drupal.org/drupal-7.30 · Note
• https://bugs.mageia.org/show_bug.cgi?id=13876 · Note
• https://drupal.org/drupal-7.31 · Note
• https://drupal.org/drupal-7.31-release-notes · Note
• https://drupal.org/drupal-7.30-release-notes · Note
• https://drupal.org/SA-CORE-2014-004 · Note